SSH known_hosts config
authorOliver Walsh <owalsh@redhat.com>
Fri, 24 Mar 2017 14:35:09 +0000 (14:35 +0000)
committerJames Slagle <jslagle@redhat.com>
Thu, 20 Apr 2017 22:16:35 +0000 (22:16 +0000)
commit68d7196d472b5195c19e871e960996e89a7bcb9c
tree83cd2872cf542106ea19a343d1c5217e18287f7d
parent33e53fd87784914d010411ec85d040623e4c2617
SSH known_hosts config

Fetch the host public keys from each node, combine them all and write to the
system-wide ssh known hosts. The alternative of disabling host key
 verification is vulnerable to a MITM attack.

Change-Id: Ib572b5910720b1991812256e68c975f7fbe2239c
(cherry picked from commit 7d3552a105ad5aa62cad0998c11df5ec6bd06ed6)
extraconfig/tasks/ssh/host_public_key.yaml [new file with mode: 0644]
extraconfig/tasks/ssh/known_hosts_config.yaml [new file with mode: 0644]
overcloud-resource-registry-puppet.j2.yaml
overcloud.j2.yaml
puppet/blockstorage-role.yaml
puppet/cephstorage-role.yaml
puppet/compute-role.yaml
puppet/controller-role.yaml
puppet/objectstorage-role.yaml
puppet/role.role.j2.yaml
releasenotes/notes/ssh_known_hosts-287563590632d1aa.yaml [new file with mode: 0644]